Introduction
Villva Software Pvt Ltd ("Villva", "we", "us", or "our") provides a cloud-based enterprise resource planning (ERP) platform ("Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have.
This policy applies to our website and the Villva Service. By using either, you agree to the practices described here.
Information we collect
- Account data: name, work email, phone number, company name, and role, provided when you sign up or request a demo.
- Business data: the records you enter into the Service, such as sales, purchasing, inventory, production, accounting, and HR data. You own this data; we process it on your behalf.
- Usage data: log data, device and browser type, IP address, and how you interact with the Service, used to keep it secure and reliable.
- Cookies: essential cookies for authentication and session management, and optional analytics cookies.
How we use information
- Provide, maintain, and secure the Service.
- Authenticate users and manage your account.
- Respond to enquiries, demo requests, and support tickets.
- Improve features, performance, and reliability.
- Send service and security notices, and product updates where you have opted in.
- Comply with legal, tax, and regulatory obligations.
Data isolation and multi-tenancy
Villva is a multi-tenant SaaS platform. Each company's data is logically isolated so that one customer can never access another customer's records. We do not sell your business data, and we do not use it to train models for other customers.
The Villva mobile app
The Villva app for Android and iOS is another way into the same Service, signed in with the same account. Beyond the business data you work with in it, it handles only the following:
- Sign-in: your work email and password are sent to your company's workspace to sign you in. The app keeps a session token in the device's secure storage (the iOS Keychain or the Android Keystore), excluded from device backups and removed when you sign out.
- The workspaces you sign in to: their addresses are kept on the device so you can switch between them.
- Notifications: if you turn them on, a push token for this device is sent to your workspace so it can notify you; it is removed when you sign out.
- Crash reports: if the app fails, it may send the kind of error, where in the app it happened, the app version, and the device's operating system and version. They carry no name, email, workspace, or record content.
- Camera: used only while you scan a code or take a photo you choose to attach; images you do not attach are not kept or sent.
- The app does not collect your location, does not track you across other apps or websites, and shows no advertising.
Security
We protect data in transit and at rest using industry-standard encryption, role-based access controls, and continuous monitoring. No system is perfectly secure, but we work hard to safeguard your information and to notify you promptly of any incident that affects it.
Data retention
We retain your business data for as long as your account is active. After termination, data is retained for a limited period to allow export, then deleted or anonymised, unless a longer period is required by law.
Your rights
Subject to applicable law, you may:
- Access, correct, or export your personal data.
- Request deletion of your personal data.
- Object to or restrict certain processing.
- Withdraw consent for optional communications at any time.
Changes to this policy
We may update this policy as the Service evolves. Material changes will be posted here with a revised "Last updated" date, and where appropriate we will notify you directly.
Contact us
Questions about this policy or your data? Reach us through the contact form on our website and we will respond promptly.